Information Security

Multifactor Authentication (MFA) is enforced at Valdosta State University to help prevent attackers from gaining access to your VSU online accounts and resources in case your password credentials are compromised. In addition to typing your username and password (one factor), you will also, when prompted, type a dynamically generated verification code provided by the Microsoft Authenticator app or sent to your phone (another factor) before gaining access to your online accounts and resources.

Passwords are your first line of defense.

Even the best encryption sometimes cannot protect you against attacks if you've chosen a password that is easy to guess or crack. Update your password often and when you suspect your account may have been compromised; and never use your VSU ID or password for non-VSU systems. 

1. Create a password that contains a minimum of 14 characters. Use a mnemonic, such as the first letter of a song verse or a phrase, while adding in numbers, symbols ($, %, *), and UPPER/lower case letters to help you remember the password (example "H1t@b1t?").
   
   
2. Never use birthdates, names or words in a dictionary as a password. 
   
   
3. Do not share your password, not even to tech support! VSU Information Technology staff will never ask for your password. And do not grant access to your account or let others use your computer while logged in under your account.
   
   
4. Use a password manager instead of writing down passwords. Some popular options are LastPass, Keeper, Dashlane, or 1Password.
   
   
5. Avoid selecting the "save/remember my password" option in Internet browsers and applications.

Most VSU account access and password issues can be resolved by resetting your password. Additionally, VSU Information Technology enforces a mandatory 180-day password reset stance. Resetting your password is easy but how you do it depends on your role as a student or employee, an international student, or a GoVIEW student:

VSU STUDENTS AND EMPLOYEES

1. Select "I Don't Know My Password"
2. Enter the requested information
3. Click the red "Reset" button
4. Enter and re-enter your new password
5. Click the grey "Reset Password" button

INTERNATIONAL VSU STUDENTS

• Call VSU Solutions Center at 229-245-4357
• For altnerative support, contact the Center for International Programs

GoVIEW STUDENTS

1. Visit GoVIEW Forgot Password
2. Enter your username_vsu
3. Click "Submit"
4. A GoVIEW password reset email will be sent to your MyVSU email address. Check your junk folder.

WHAT IS PHISHING?

Phishing email messages, websites, and phone calls are designed to steal money or sensitive information. Cybercriminals can do this by installing malicious software on your computer, tricking you into giving them sensitive information, or outright stealing personal information off of your computer.

What to do if you receive a phishing email at your @valdosta.edu account: 

• VSU Information Technology (IT) will NEVER ask for your password. Be wary of any emails asking for passwords. Never send passwords, bank account numbers, or other private information in an email.

• Be cautious about opening attachments and downloading files from emails, regardless of who sent them. These files can contain viruses or other malware that can weaken your computer's security. If you are not expecting an email with an attachment from someone, such as a fax or a PDF, call the sender and ask if he/she indeed sent the email. If not, the sender may have been a victim and should change his/her email password immediately.

• Never enter private or personal information into a popup window.

• If there is a link in an email, use your mouse to hover over that link to see if it is sending you to where it claims to be. This can thwart many phishing attempts.
  
  
• Look for 'https://' and a lock icon in the address bar before entering any private information on a website.

• Look for spelling and bad grammar. Cybercriminals are not known for their grammar and spelling. Professional companies or organizations usually have staff that will not allow a mass email like this to go out to its users. If you notice mistakes in an email, it might be a scam.
  
  
• Forward suspicious VSU emails to abuse@valdosta.edu.
  

Encryption enhances the security of a message or file by scrambling the contents so that it can be read only by someone who has the right encryption key to unscramble it. Encryption helps to protect the confidentiality of digital data stored on computer systems or transmitted via the internet or other computer networks. Use encryption when you need a strong level of protection for your information, including email that contain sensitive information such as student and employee personally identifiable information (PII). PII is data that could be used to identify a specific individual. Any two or more pieces of identifying data communicated together are also considered PII. Examples of PII that incorporate sensitive data include but are not limited to the following:

• Full name, Birthdate, and Birthplace
• Social Security Number or Driver’s license
• Student/employee identification number, or any other personal ID number
• Financial account number or credit card number
• Regulated Information: Medical Information (HIPAA data), Employment Information, Student Records (FERPA data).

In October 2019, the Georgia Governor’s Office, along with the University System of Georgia (USG), mandated that all state and university employees complete cybersecurity training twice a year. USG partnered with KnowBe4, an industry leader in the cybersecurity awareness platform, to deliver this system-wide training.